Provider Watch
from Onlook

Edition 09 · Fri Jun 5, 2026

No headline act this week — the plumbing got serious — the agent stack hardened.

Nobody launched a model or a marquee product. Instead the execution layer matured all at once: E2B sandboxes now pause and resume with full memory state, Cloudflare locked down Workers egress and bulk secrets, and Vercel Blob dropped long-lived tokens for OIDC and signed URLs. The plumbing for running agent-generated code safely quietly grew up.

Read E2B's persistence docs
Editorial illustration: a row of sturdy pipes and valves being tightened by careful hands in the dark, one joint glowing ember where it's just been sealed — infrastructure quietly hardened

A quiet week with a theme — the execution layer hardened. Four items, ranked by Onlook impact.

  1. 01

    E2B sandboxes can now pause and resume with full memory state

    Sandbox persistence (public beta) snapshots filesystem and memory — pause an idle agent session, resume it ~1s later exactly where it left off, up to 30 days. Auto-pause replaces shutdown-on-timeout. If we ever run generated code in a sandbox, this is the primitive that makes per-user sessions cheap to keep warm.

  2. 02

    Vercel Blob drops long-lived tokens — OIDC auth and signed URLs land

    Blob now supports OIDC authentication (no more long-lived tokens) and time-bound signed URLs for upload/download/delete. Plus elastic build machines auto-adjust to dodge OOM failures. Real hosting-layer hardening on the surface we deploy against.

  3. 03

    Cloudflare hardens Workers — egress control, bulk secrets, Agent Skills

    Workers can now filter public egress through Gateway policies, manage up to 100 secrets per API call, and schedule Workflow instances via cron in the binding. The Agents SDK v0.14.0 adds an Agent Skills primitive — the skills-as-table-stakes arc reaches the edge runtime.

  4. 04

    Anthropic trims the API edges — and says Claude writes 80% of its own code

    Smaller, real API wins: the advisor tool gains max_tokens, and refusals with no output stop being billed. Alongside, Anthropic published that over 80% of code merged at the company is now written by Claude — a data point worth sitting with.

Editorial illustration: a workshop frozen mid-motion under a soft ember glow — tools suspended in the air, a half-poured liquid held still — then the same scene resuming, nothing lost

Sandboxes that pause and wake up exactly where they left off.

E2B shipped sandbox persistence (public beta): you can pause a running sandbox and resume it later with not just the filesystem but the full memory state — running processes, loaded variables, everything — restored in about a second. Pausing costs ~4s per GB of RAM; sandboxes can stay paused up to 30 days. A new auto-pause mode replaces shutdown-on-timeout, so idle agent sessions hibernate instead of dying.

We don't run a sandbox today, but this is the exact primitive the agent-execution future needs. If Onlook ever executes user-generated code per project, persistence is what makes a per-user session cheap to keep warm between interactions — resume in a second rather than cold-booting and replaying state. It pairs directly with the Anthropic self-hosted-sandboxes thread we've been tracking.

What's new

  • Pause/resume restores filesystem and memory (processes, variables) — ~1s to resume.
  • Snapshots: save a state and spin up new sandboxes from it.
  • Auto-pause (beta): idle sandboxes hibernate instead of shutting down. Up to 30-day retention.
Editorial illustration: a heavy permanent key dissolving into a series of small time-stamped tokens that flare ember-bright and fade — short-lived credentials replacing a master key

Blob stops asking you to hold a long-lived token.

Vercel Blob picked up two real security upgrades: OIDC authentication, which eliminates long-lived storage tokens, and time-bound signed URLs that scope upload, download, inspection, and deletion to a window. Separately, elastic build machines now auto-adjust resources to prevent out-of-memory failures mid-deploy.

All three land on the hosting surface we actually deploy against. The Blob auth changes are the kind of thing that quietly removes a whole class of credential-leak risk; the OOM-protected builds remove a flaky-deploy failure mode. Nothing flashy, all directly useful.

What's new

  • Blob OIDC auth — no more long-lived tokens.
  • Blob signed URLs — time-bound access for upload / download / inspect / delete.
  • Elastic build machines auto-scale to avoid OOM deploy failures.
  • Monorepo: edit Git settings across all projects in a repo at once.
Editorial illustration: a contained workshop with a single guarded gate controlling what leaves, a ring of small sealed lockboxes around it, one latch glowing ember — controlled egress and bundled secrets

Workers get a tighter blast radius — and an Agent Skills primitive.

A cluster of Workers hardening this window: you can now filter a Worker's public-internet egress through Gateway policies, manage up to 100 secrets in a single API call, and attach cron schedules to Workflow instances directly in the binding (no separate handler). The Agents SDK v0.14.0 also added an Agent Skills primitive — the same "skills" surface that keeps showing up across the category, now at the edge.

One migration note: the pipeline binding config field was renamed to stream (old field deprecated). Egress control and bulk secrets are the items that matter if we ever run agent code on Workers — they're exactly the containment knobs you want.

What's new

  • Workers public egress filterable via Gateway policies.
  • Bulk secrets API — up to 100 create/update/delete ops per call.
  • Workflow instances schedulable via cron in the binding.
  • Agents SDK v0.14.0 — Agent Skills, messengers, scheduled tasks. pipelinestream rename.
Editorial illustration: a workshop where most of the tools move on their own under a warm ember light while a single human hand rests at the edge, observing — most of the work now done by the machine

Small API wins — and a striking number about who writes the code.

Two quiet but real API changes on the Claude Platform: the advisor tool gained a max_tokens cap (lower latency and cost when you don't need a full advisor response), and requests that return a refusal with no output are no longer billed. Both are the kind of edge-trimming that adds up across a high-volume agent loop.

The line worth sitting with came from Anthropic itself: over 80% of the code merged at the company is now written by Claude. Whatever the exact accounting, it's the clearest public signal yet of where agent-written production code is heading — and we're building a tool squarely in that current.

Alex Albert
@alexalbert__ · Jun 4
Published internal data: over 80% of all code merged at Anthropic is now written by Claude.

Stuff we didn't dig into. Skim for serendipity.

Anthropic

Beyond the deep card: Managed Agents webhooks, multiagent orchestration, and self-hosted sandboxes are now available on Claude Platform on AWS (May 29). — AWS-billed managed agents — enterprise reach, not our path today

Vercel platform

Also in window: edit Git settings across all projects in a repo (monorepo convenience). And @rauchg signaled a Vercel investment in the Nitro open runtime (@nitrojsdev) — low-confidence positioning, not a shipped feature. — the Nitro/open-runtime stance is worth watching if it becomes a real post

Bun

No release this window. Still v1.3.14 (May 13) — which, for the record, shipped Bun.Image and HTTP/3, not just a version bump. — quiet; the Rust-stable tag remains the thing to watch

Next.js

No new release this window. The agent-eval harness at nextjs.org/evals (Edition 08) remains the standing item to watch. — carryover

React

No release this window. React Compiler diagnostics iterate via the eslint-plugin-react-hooks changelog, not core tags. — quiet

TypeScript

No release this window. 6.0 GA stable; the Go-port 7.0 RC is the imminent item. — watch for 7.0 RC/GA

Tailwind CSS

No release this window. 4.3 (May 8) remains latest. — quiet

tRPC

No release this window. — quiet

TanStack Query

No Query-proper release this window. Ecosystem (TanStack DB persistence, Start RC) continues on the shared blog. — quiet on Query itself

Drizzle ORM

No new tag this window. Still in the v1.0.0-rc train heading to GA; the casing breaking change still looms. — watch for the 1.0 GA cut

Zod

No release this window. Still on the 4.4.x line. — quiet

Neon

No new launch this window. The May 29 backend expansion (Object Storage, AI Gateway) was the headline; weekly changelog otherwise. — carryover

Liveblocks

No Storage/Presence/Sync/Yjs release this window. (Watch item: the React Flow Multiplayer SDK from Unveil Week is canvas-relevant and still un-deep-covered.) — the React Flow SDK deserves a real look soon

Storybook

No new stable this window. — quiet

MCP SDK

No tagged release this window. v2 still alpha; stable targeted ~Jul 28. — watch for v2 stable

React Flow (xyflow)

No release this window. 12.11.0 (autoPanOnSelection, Jun 1) was last window. — quiet

Motion

No release this window. Commercial AI Kit / MotionScore iterate on motion.dev/changelog. — quiet on the OSS library

Twitter · X coverage
Twitter / X coverage continues this edition — quoted and attributed by handle, no outbound links per policy.

Provider Watch

20 providers tracked · sources locked Jun 5, 2026 · daily collect, publish when ready

Source map
  • Foundational (9): Next.js · React · TypeScript · Bun · Tailwind CSS · tRPC · TanStack Query · Drizzle ORM · Zod
  • Paid services (7): Neon · Vercel · Liveblocks · E2B · Cloudflare Workers · Langfuse · Anthropic Claude Agent SDK
  • Strategic (4): Storybook · MCP SDK · React Flow · Motion
  • Adjacent-only watch: Vercel AI SDK (migrating off) · competitors in design-to-code